tx4n.matrixrevolution.shop - suspicious URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned tx4n.matrixrevolution.shop and returned a suspicious verdict (score 25), categorised as phishing. The page resolved to 104.21.54.198 on Cloudflare, Inc. in US. 5 domains and 4 IPs were contacted, over 7 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 25) · Confidence 28%
- Scanned URL:
https://tx4n.matrixrevolution.shop/ - Domain: tx4n.matrixrevolution.shop · IP: 104.21.54.198 · AS13335 · US
- Server: cloudflare
- Page title: TERONG123 # Situs Resmi Slot Gacor Terbaru Dijamin Pasti WD 2026
- HTTP status: 200 · text/html
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 14 06: · subject CN=matrixrevolution.shop
- HTTP requests captured: 7 · outgoing links: 3
- Scan tier: standard · observed 2026-08-21 14:28:14 UTC
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- phishing
Why this verdict
- Domain impersonates revolut (combosquat)
Detected technologies
- Cloudflare
- WordPress
Contacted infrastructure
- 104.21.54.198 - AS13335 Cloudflare, Inc. (United States)
- 142.250.195.97 - AS15169 Google LLC (India)
Observed indicators
- tx4n.matrixrevolution.shop
- speed-clothes.com
- meubelkayumurah.pics
- cdn.ampproject.org
- cutt.ly
- 104.21.54.198
- 172.67.141.140
- 142.250.195.97
- 172.67.145.142
- https://tx4n.matrixrevolution.shop/
- https://speed-clothes.com/collections/leggings
- https://meubelkayumurah.pics/wp-content/uploads/2025/11/icon-terong123.png
- https://cdn.ampproject.org/v0.js
- https://meubelkayumurah.pics/wp-content/uploads/2025/11/logo-terong.png
- https://meubelkayumurah.pics/wp-content/uploads/2025/12/terong123-2.jpg
- https://cutt.ly/MAINTERONG3
Questions about tx4n.matrixrevolution.shop
- Is tx4n.matrixrevolution.shop safe?
- No. MalwareAnalyzer scanned tx4n.matrixrevolution.shop on 21 Aug 2026 and returned a suspicious verdict with a score of 25 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
- How was tx4n.matrixrevolution.shop checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of tx4n.matrixrevolution.shop
Scanned on MalwareAnalyzer by Cyble · Open interactive scan